Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: 8vrJmgGdAGjeaGX00TjZxip72js4Rqw0tLCy2kvJBvk=
Subject key identifier: 6F:39:57:C5:9A:5B:EC:7B:5C:B4:5A:40:B0:AF:24:36:C5:43:58:E8
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 0194BCE084AA4AFC99CBF9566E1059398F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 02A2
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: clyhMt5nQntvl-Ze3Rt9YMtzLac.roa (hash: kfiVw7U4Hr5RIO3AxqWgLKoiWDr93cuGtZTr7R10bDc=)
2: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: 6OmKEyoc6Yj5ijzYAWaR7Kpi3uKUA3iafkin6qJoW4c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:84:aa:4a:fc:99:cb:f9:56:6e:10:59:39:8f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=6f3957c59a5bec7b5cb45a40b0af2436c54358e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:55:12:47:75:11:c5:cd:1c:c4:b5:30:53:
c7:48:38:58:e6:89:36:e4:4c:64:7a:52:ec:be:15:
cf:fd:8d:70:2c:7e:10:84:72:b7:fe:bf:8e:27:06:
67:a3:22:ff:25:fa:e1:4e:89:ee:41:98:55:6a:b7:
6b:63:28:3d:69:13:96:2e:d4:a4:05:4b:4a:fb:b3:
c3:85:5c:bd:93:13:d7:24:5a:a4:9a:6e:0e:60:4f:
69:0a:66:73:54:ce:c6:36:00:f4:8b:a4:8e:ec:89:
06:66:04:79:38:0c:e6:6e:1e:85:f5:76:7b:c0:95:
5a:78:21:76:eb:cf:d9:31:5c:eb:05:8c:0a:e7:d3:
66:66:94:e4:e0:06:cd:39:a8:d3:5b:fd:8e:f2:80:
3f:ed:ff:d6:49:f0:e1:dc:72:17:42:61:57:b3:92:
54:4c:42:f3:59:35:e0:d3:bb:e7:57:bf:58:67:2b:
13:5e:98:95:11:39:55:64:71:84:05:55:c1:62:20:
c9:05:e7:b3:ed:d4:49:93:67:e9:b2:3b:67:74:a9:
39:d0:6b:c7:a8:e5:e6:24:ea:68:ac:43:8c:a4:fc:
87:c7:7a:52:11:7a:f6:eb:4e:3b:a3:1e:53:cd:1c:
3d:62:d6:f4:b6:08:08:09:1a:c3:d2:1a:ab:b7:12:
22:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:39:57:C5:9A:5B:EC:7B:5C:B4:5A:40:B0:AF:24:36:C5:43:58:E8
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ce:f9:26:5c:52:39:bb:eb:de:5b:e5:4a:78:76:93:8b:5e:
a3:62:05:08:0f:15:94:67:a1:69:46:04:a8:8a:23:9a:53:fa:
5d:36:b5:a0:6b:7c:b9:1a:4a:bc:a4:f0:95:54:1d:04:ac:de:
c1:a6:82:0a:20:e3:2d:53:49:cd:4a:c4:32:0b:dc:fa:7a:4f:
f9:5e:cf:30:f0:6f:dc:01:f3:76:e2:8f:64:47:d0:f5:71:c2:
e8:4d:78:63:32:78:49:c6:57:6e:0a:ee:44:50:16:ec:c9:40:
b6:46:cb:3d:04:9d:93:1e:ad:f6:73:f2:83:f5:08:a2:45:87:
64:2e:c4:a2:1c:a1:9b:36:43:45:a7:ec:ba:fe:a5:c4:8b:1d:
43:dd:08:66:f8:a3:12:3e:81:51:01:72:06:92:2f:d7:49:9b:
80:c3:b4:b1:9d:55:b2:70:ef:59:52:f9:76:34:5d:0f:5e:ee:
3c:92:42:52:bc:94:be:90:c2:90:bf:27:8a:a7:94:c5:92:fd:
ef:d4:5c:50:5a:cc:8c:ee:b6:64:ea:a9:21:4f:b1:98:9b:55:
31:ec:c5:c4:49:f1:87:c7:f4:c9:98:7d:80:53:b1:13:dd:a0:
f1:19:66:e6:03:99:7b:a3:71:98:ec:3b:45:0a:1e:38:e4:aa:
55:5b:f7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:00 2025 by rpki-client